Privacy Policy

Last updated: 08/272026

This Privacy Policy explains how IffyPhoto (“we”, “us”, or “our”) collects, uses and protects your personal data when you visit our website or place an order.

We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for the processing of your personal data is:

Christopher Fieffer / Iffy Photo
Italy
VAT Number: IT10647541217
Email: writetochrisf@gmail.com

If you have any questions regarding this Privacy Policy or how your personal data is handled, you can contact us using the details above.

2. Personal Data We Collect

Depending on how you use our website, we may collect the following personal data:

• First and last name;

• Email address;

• Shipping and billing address;

• Telephone number, where provided;

• Information relating to your order;

• Communications you send to us;

• Technical information necessary for the operation and security of the website, such as IP address, browser and device information.

We do not directly store or process your complete payment card details.

Payments are processed through third-party payment providers, including Stripe and PayPal, depending on the payment method selected at checkout.

3. How We Use Your Data

We process your personal data for the following purposes:

• To process and fulfil your orders;

• To arrange production and delivery of photographic prints;

• To communicate with you regarding your order;

• To process payments;

• To provide customer support;

• To comply with legal, accounting and tax obligations;

• To protect the security and proper operation of our website and services;

• To prevent fraud or misuse of our services.

We only process personal data when we have a valid legal basis for doing so under applicable data protection law.

4. Payment Providers

Payments made through our website are processed by third-party payment providers.

Depending on the payment method selected, your payment information may be processed by:

Stripe
Stripe processes payment-related personal data in accordance with its own Privacy Policy.

PayPal
PayPal processes payment-related personal data in accordance with its own Privacy Policy.

We do not receive or store your complete payment card information.

5. Hosting and Website Services

Our website is hosted using services provided by Hostinger.

Hostinger may process certain personal data on our behalf in order to provide website hosting and related services.

Further information about Hostinger's processing of personal data is available in its own Privacy Policy.

6. Sharing of Personal Data

We may share personal data only when necessary to operate our business and provide our services.

This may include:

• Payment providers, such as Stripe and PayPal;

• Hosting and website service providers, such as Hostinger;

• Shipping and delivery providers, where necessary to deliver your order;

• Professional advisers, accountants or other service providers where required;

• Public authorities or other parties where disclosure is required by law.

We do not sell your personal data.

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including the fulfilment of orders, customer support, legal obligations and accounting or tax requirements.

When personal data is no longer required, it will be deleted or anonymised where appropriate, subject to any legal obligations requiring us to retain certain information for a longer period.

8. Your Rights

If you are located in the European Economic Area or in another jurisdiction that provides similar rights, you may have the right to:

• Access your personal data;

• Request correction of inaccurate or incomplete data;

• Request the deletion of your personal data, where applicable;

• Request restriction of the processing of your personal data;

• Object to certain processing activities;

• Request the portability of your personal data;

• Withdraw your consent where processing is based on consent;

• Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, please contact us at:

writetochrisf@gmail.com

9. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing data electronically can be guaranteed to be completely secure.

10. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party website you visit.

11. Cookies

Our website may use cookies or similar technologies that are necessary for the proper operation, security and functionality of the website.

If additional cookies or tracking technologies are introduced in the future, such as analytics or advertising cookies, this Privacy Policy and, where necessary, our cookie settings or Cookie Policy may be updated accordingly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services or legal obligations.

Any updated version will be published on this page with a revised “Last updated” date.

13. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, please contact:

Christopher Fieffer / Iffy Photo
Email: writetochrisf@gmail.com